$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b06d2e8-1155-4d82-9379-5c85ac3775a4.roa File: 3b06d2e8-1155-4d82-9379-5c85ac3775a4.roa (raw, json) Hash identifier: hKh3D3z03CoJxEvFT9y8tKF6Awpy6LlmVJ1WLRZP4YY= Subject key identifier: A7:1A:1E:8A:B3:5B:75:42:A1:33:A6:48:1E:E1:A9:99:C1:16:75:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F75E4F50B62F6FA02CEFB7F6723D42015D7D1B5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b06d2e8-1155-4d82-9379-5c85ac3775a4.roa Signing time: Sun 31 May 2026 00:00:42 +0000 ROA not before: Sun 31 May 2026 00:00:42 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:75:e4:f5:0b:62:f6:fa:02:ce:fb:7f:67:23:d4:20:15:d7:d1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:42 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=46813892c80ea4410c13f9016056df0595430a2a456bf8ad5d7a0ebb67299e25, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:c3:ff:a4:1f:88:4f:ff:aa:00:4c:d4:89: 37:a1:40:5f:76:08:d2:6b:2b:fc:f2:88:63:78:fd: 87:9d:7c:e9:9c:91:28:c4:d7:49:c1:de:90:00:e9: 78:cc:4a:d1:3c:f5:49:1b:ed:43:36:cc:2f:43:e5: a1:74:51:16:d5:3b:34:53:4c:da:90:6b:ab:80:46: 8a:0d:86:1b:d9:e2:0e:96:58:46:fe:92:e7:c6:a6: bd:db:58:97:d4:11:ed:9e:54:19:fe:96:f0:1c:37: 45:6e:58:87:e2:96:d8:fa:13:b1:48:0a:a6:d7:81: 3c:5d:40:3f:7e:5d:c4:0c:d5:68:dd:65:76:9c:6b: 38:d3:e0:e8:05:92:0c:95:48:fa:d6:a1:20:65:08: 6e:3a:4b:16:fb:28:da:d7:1a:20:10:15:b2:28:69: 89:dd:f5:29:81:17:ba:02:5d:4d:9b:7e:0e:4e:92: af:a5:b6:86:fa:1b:70:29:95:bc:45:8c:75:3e:95: 51:d5:73:b7:29:c8:28:8e:d0:36:c0:68:d7:7b:f6: 16:19:98:7f:58:87:76:f1:04:61:48:bb:90:f1:28: 63:3e:ce:32:ad:99:c9:ae:34:88:39:0f:d1:9e:98: 20:33:52:ee:7b:42:40:fc:9f:2a:24:54:60:3f:7a: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:1E:8A:B3:5B:75:42:A1:33:A6:48:1E:E1:A9:99:C1:16:75:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b06d2e8-1155-4d82-9379-5c85ac3775a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:e000::/40 Signature Algorithm: sha256WithRSAEncryption 71:d8:ef:93:71:a6:73:c7:19:e1:bb:e8:12:21:7b:1d:3a:94: 1b:55:10:62:f5:3f:8b:ab:43:c4:04:02:0b:44:79:cd:59:8b: 52:8c:cd:51:34:e1:0f:ff:2b:0a:0f:79:54:50:d2:7f:27:56: 16:22:c4:16:26:6d:df:77:0b:10:86:92:57:70:5c:20:04:50: 96:8f:41:e0:8b:32:6f:79:3a:bf:b3:c9:8a:04:50:fa:a3:a1: 63:0e:eb:f4:49:bd:13:9f:7d:b2:f2:e5:56:5e:55:96:68:34: e4:25:15:bb:10:27:4d:c2:88:ee:21:c8:ad:64:4f:95:d0:cc: a7:90:ec:10:0c:40:8f:4a:6d:52:1d:f3:9d:b0:63:81:fb:93: d8:1e:c8:d4:c2:d9:8d:59:d1:a6:45:65:41:0d:7d:64:c5:d2: 62:ba:9d:95:c2:de:9f:ee:70:ef:1d:f0:e8:62:ee:b5:34:0f: cf:5e:89:aa:5e:14:d1:45:01:26:8c:77:c3:15:05:bb:c8:0a: 2a:d6:06:70:a6:13:14:a8:67:53:26:3c:30:cc:d2:45:f4:d4: 3d:08:98:c7:1b:d7:f8:7a:16:fb:89:cf:93:6d:3c:6d:e0:90: 93:0b:9b:1c:96:86:fe:33:21:43:2e:18:17:39:9a:f4:8f:bf: 87:17:c1:2d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL3Xk9Qti9voCzvt/ZyPUIBXX0bUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDA0MloX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNANDY4MTM4OTJjODBlYTQ0MTBjMTNm OTAxNjA1NmRmMDU5NTQzMGEyYTQ1NmJmOGFkNWQ3YTBlYmI2NzI5OWUyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXD/6QfiE//qgBM1Ik3oUBfdgjS ayv88ohjeP2HnXzpnJEoxNdJwd6QAOl4zErRPPVJG+1DNswvQ+WhdFEW1Ts0U0za kGurgEaKDYYb2eIOllhG/pLnxqa921iX1BHtnlQZ/pbwHDdFbliH4pbY+hOxSAqm 14E8XUA/fl3EDNVo3WV2nGs40+DoBZIMlUj61qEgZQhuOksW+yja1xogEBWyKGmJ 3fUpgRe6Al1Nm34OTpKvpbaG+htwKZW8RYx1PpVR1XO3KcgojtA2wGjXe/YWGZh/ WId28QRhSLuQ8ShjPs4yrZnJrjSIOQ/RnpggM1Lue0JA/J8qJFRgP3q7iQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKcaHoqzW3VCoTOmSB7hqZnBFnVbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiMDZkMmU4LTExNTUtNGQ4Mi05Mzc5LTVjODVhYzM3NzVhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauuAwDQYJKoZIhvcNAQELBQADggEBAHHY75NxpnPHGeG76BIh ex06lBtVEGL1P4urQ8QEAgtEec1Zi1KMzVE04Q//KwoPeVRQ0n8nVhYixBYmbd93 CxCGkldwXCAEUJaPQeCLMm95Or+zyYoEUPqjoWMO6/RJvROffbLy5VZeVZZoNOQl FbsQJ03CiO4hyK1kT5XQzKeQ7BAMQI9KbVId852wY4H7k9geyNTC2Y1Z0aZFZUEN fWTF0mK6nZXC3p/ucO8d8Ohi7rU0D89eiapeFNFFASaMd8MVBbvICirWBnCmExSo Z1MmPDDM0kX01D0ImMcb1/h6FvuJz5NtPG3gkJMLmxyWhv4zIUMuGBc5mvSPv4cX wS0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:16:19 2026 by rpki-client